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requested service, when the requested service is permitted and, in response to the 
predetermined setup, initiating a network connection based on at least one respective 
appropriate policy and logic corresponding to the requested service; 

passing a first predetermined signal across a network in response to the predetermined 

setup; 

initiating a second predetermined setup, in response to the passed first predetermined 

signal; 

passing a second predetermined signal across the network in response to the second 
predetermined setup, the second predetermined signal indicating whether to allow the 
network connection; and 

providing to the initiating customer, in which multiple service requests are correlated 
with respective services to enable at least one appropriate policy and logic] a response 
indicating whether the network connection is allowed. 

20. (Amended - Clean Copy) A method for switching plural forms of data, 
comprising: 

receiving a service request initiated by an initiating customer; 
obtaining predetermined data related to at least one of policy and logic of the 
requested service; 

establishing a network connection using a first predetermined setup, initiated to realize 
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the requested service, in which multiple predetermined setups are correlated with respective 
services to enable corresponding at least one appropriate policy and logic; and 

initiating a second predetermined setup to one of accept and reject the requested 
network connection on behalf of the requested service. 

21. (Amended - Clean Copy) The method of claim 20, wherein obtaining the 
predetermined data for the requested service comprises using a pushing procedure. 

22. (Amended - Clean Copy) The method of claim 20, wherein obtaining the 
predetermined data for the requested service comprises using a pulling procedure. 

23. (Amended - Clean Copy) The method of claim 20, wherein obtaining the 
predetermined data for the requested service comprises using a query procedure. 

24. (Amended - Clean Copy) The method of claim 20, further comprising requesting 
the initiating customer to initiate the predetermined setup as a user-to network interface 
setup. 

25. (Amended - Clean Copy) The method of claim 20, wherein establishing the 
network connection to realize the requested service comprises transferring the first 
predetermined setup over an ATM network, the first predetermined setup being redirected 
from a switching device to a service controller. 


28. (Amended - Clean Copy) The method of claim 20, wherein obtaining the 
^ predetermined data for the requested service comprises providing a certificate for 
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establishing the network connection in combination with the predetermined setup. 

29. (Amended - Clean Copy) The method of claim 28, wherein the certificate 
specifies at least a permitted setup parameter. _ ^ 


32. (Amended - Clean Copy) The method of claim 28, wherein the certificate further 
identifies the requested service, which allowed the setup. 


Please enter the following new claims for consideration by the Examiner: 


— 39. A method for controlling customer access to capabilities of a network 
associated with a network service, the method comprising: 

receiving a request for the network service from a customer system at a service control 
distinct from a network connection capability of the network; 

when the request is authorized, providing a certificate that specifies at least one 
permitted connection setup parameter related to the network service; 

initiating a network connection setup request, associated with the network service, and 
providing the certificate; and 

enabling a network connection in response to the network connection setup request 
based on the certificate and the at least one permitted connection setup parameter. 

40. The method for controlling user access to capabilities of a network associated 
with a network service according to claim 39, the network comprising an ATM network. 
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41. The method for controlling user access to capabilities of a network associated 
with a network service according to claim 39, the network comprising a packet switched data 
network. 

42. The method for controlling user access to capabilities of a network associated 
with a network service according to claim 39, further comprising encrypting the certificate. 

43. The method for controlling user access to capabilities of a network associated 
with a network service according to claim 39, further comprising preventing a repeat use of 
the certificate. 

44. A method for controlling access to network capabilities associated with a network 
service, the method comprising: 

providing a certificate in response to an authorized request for the network service, 
the certificate specifying at least one permitted connection setup parameter related to the 
network service; 

initiating a connection setup request associated with the network service based on the 
certificate, the connection setup request comprising a predetermined connection setup 
message; 

routing the connection setup request through the network based on the certificate, the 
predetermined connection setup message and the at least one permitted connection setup 
parameter; and 
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allowing the connection setup request based on the certificate, the predetermined 
connection setup message and the at least one permitted connection setup parameter. 

45. The method for controlling user access to capabilities of a network associated 
with a network service according to claim 44 5 the certificate further specifying at least one 
of policy and logic of the network service. 

46. The method for controlling user access to capabilities of a network associated 
with a network service according to claim 44, the network comprising an ATM network. 

47. The method for controlling user access to capabilities of a network associated 
with a network service according to claim 44 the network comprising a packet switched data 
network. 

48. A system for controlling user access to capabilities of a network associated with 
a network service, the system comprising: 

a service controller that receives a request for the network service from a user system, 
determines whether the request for the network service is authorized and, when the request 
is authorized, provides a certificate that specifies at least one permitted connection setup 
parameter related to the network service; and 

a network connection capability controller that receives the certificate and a 
connection setup request, the network connection capability initiating a network connection 
associated with the network service and enabling the network connection based on at least 
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one of the connection setup request, the certificate and the at least one permitted setup 
parameter. 

49. The system for controlling user access to capabilities of a network associated with 
a network service according to claim 48, the network comprising an ATM network. 

50. The system for controlling user access to capabilities of a network associated with 
a network service according to claim 49 the network comprising a packet switched data 
network, 

5 1 . A method for controlling customer access to capabilities of a network associated 
with a network service, the method comprising: 

receiving from a customer system a request for the network service; 

instructing the customer system to perform a connection setup request, the instructing 
comprising specification of a unique identifier to be included in the connection setup request, 
the unique identifier correlating the connection setup request and the network service; 

receiving from the customer system, at a network connection capability, the 
connection setup request, including the unique identifier; 

processing the connection setup request based on the unique identifier and at least one 
of policy and logic associated with the network service; and 

performing one of establishing a network connection and rejecting the connection 
setup request based on the processing, in accordance with the at least one of policy and logic. 
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52. The method for controlling customer access to capabilities of a network 
associated with a network service according to claim 5 1, wherein the network service pushes 
the at least one of policy and logic into the network connection capability prior to instructing 
the customer system to perform a connection setup request. 

53. The method for controlling customer access to capabilities of a network 
associated with a network service according to claim 51, wherein the network connection 
capability pulls in the at least one of policy and logic from the network service after receiving 
the connection setup request. 

54. The method for controlling customer access to capabilities of a network 
associated with a network service according to claim 51, wherein the network service 
instructs the network connection capability regarding the processing of the connection setup 
request based on the at least one of policy and logic from the network service and 
information regarding the connection setup request provided by the network connection 
capability in the form of a query. 

55. The method for controlling customer access to capabilities of a network 
associated with a network service according to claim 51, wherein the instructing further 
comprises a certificate to be included in the connection setup request; 

wherein the processing the connection setup request is further based on the certificate; 

and 
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wherein the performing one of establishing a network connection and rejecting the 
connection setup request is in further accordance with the certificate. 

56. A system for controlling customer access to capabilities of a network associated 
with a network service, the system comprising: 

a service controller that receives a request for the network service from a customer 
system and instructs the customer system to perform a connection setup request, the 
instructing comprising specification of a unique identifier to be included in the connection 
setup request, the unique identifier correlating the connection setup request and the network 
service; and 

a network connection capability controller that receives the connection setup request, 
including the unique identifier, from the customer system; 

wherein the network connection capability controller processes the connection setup 
request based on the unique identifier and at least one of policy and logic associated with the 
network service, and performs one of establishing a network connection and rejecting the 
connection setup request based on the processing, in accordance with the at least one of 
policy and logic. 

57. The system for controlling customer access to capabilities of a network associated 
with a network service according to claim 56, wherein the service controller pushes the at 
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least one of policy and logic into the network connection capability controller prior to 
instructing the customer system to perform a connection setup request. 

58. The system for controlling customer access to capabilities of a network associated 
with a network service according to claim 56, wherein the network connection capability 
controller pulls in the at least one of policy and logic from the service controller after 
receiving the connection setup request. 

59. The system for controlling customer access to capabilities of a network associated 
with a network service according to claim 58, wherein the service controller instructs the 
network connection capability controller regarding the processing of the connection setup 
request based on the at least one of policy and logic and on information from the connection 
setup request provided by the network connection capability controller in the form of a query. 

60. The system for controlling customer access to capabilities of a network associated 
with a network service according to claim 56, wherein the service controller further instructs 
a certificate to be included in the connection setup request; 

wherein the network connection capability controller processes the connection setup 
request further based on the certificate; and 

wherein the network connection capability controller performs one of establishing a 
network connection and rejecting the connection setup request in further accordance with the 
certificate. — 
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